Privacy policy

Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data that can be used to identify you personally. You can learn more about the topic of data protection in the following privacy policy.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Contact information for the website operator can be found in the ‘Information on the data controller’ section of this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This includes information that you enter in a contact form, for example.

Other data is automatically collected or collected on the basis of your consent by our IT systems when you visit our website. This primarily comprises technical data (e.g. Internet browser, operating system or time of the page request). Your data are automatically collected when you visit this website.

For what purposes do we use your data?

Certain data is collected in order to ensure faultless provision of this website. Other data is used to analyse how you use our site.

What are your rights concerning your data?

You have the right to receive information concerning the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to demand the rectification or erasure of this data. If you have consented to data processing, you can withdraw your consent at any time with future effect. Moreover, under certain circumstances, you have the right to demand that the processing of your personal data is restricted. You also have the right to appeal to the relevant supervisory authority.

If you have any questions regarding this or any other questions on the subject of data privacy, please contact us.

Hosting

We host content on our website using the following provider:

Mittwald

provided by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp (hereinafter referred to as Mittwald).

You can learn more in the Mittwald privacy policy: https://www.mittwald.de/datenschutz.

We use the services provided by Mittwald on the legal basis of 6(1) lit. f GDPR. We have a legitimate interest in ensuring our website is displayed as reliably as possible. Provided the applicable consent has been retrieved, processing takes place on the basis of Art. 6(1) lit. a GDPR and Section 25(1) of the Telecommunications and Telemedia Data Protection Act (TTDSG) where consent covers the storage of cookies or access to information on the user’s device (e.g. device finger printing) as set out in the TTDSG. You can withdraw previously granted consent at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the aforementioned service. This agreement is required by data protection regulations and ensures that the data controller solely process personal data from our website visitors in line with our instructions and in accordance with the GDPR.

General and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

A range of personal data are collected when you use this website. Personal data refers to any information that can be used to identify you personally. This privacy policy explains which data we collect and the purposes for which we use them. It also explains how and why data are collected.

We would like to draw your attention to the fact that transferring data online (by email, for example) is subject to a number of security gaps. We are unable to warrant complete protection of data against third party access.

Information on the data controller

The controller for data processing on this website is

Fidel Dreher GmbH
Industriestraße 28
78333 Stockach
Germany

Phone: Phone: +49 7771 9324-0
Email: info@dreher-group.com

The controller is the natural person or legal entity that, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Retention period

Unless specific retention periods are stipulated in this privacy policy, we shall store your data until the purpose for which they are processed is no longer applicable. If you assert a legitimate attempt to erase your data or withdraw your consent to the respective processing of your data, your data shall be erased, provided we do not have any other legitimate grounds for continued storage of your personal data (such as retention periods stipulated by fiscal and commercial law); in the latter case, your data shall be erased once the reasons for continued storage cease to exist.

General information on the legal bases for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1) lit. a GDPR and Art. 9(2) lit. a GDPR, if particular categories of data pursuant to Art. Art. 9(1) GDPR are being processed. If you have granted your express consent to the transfer of personal data to third countries, data processing also takes place on the legal basis of Art. 49(1) lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (e.g. via device finger printing), data processing additionally takes place on the legal basis of Section 25(1) TTDSG. You can withdraw previously granted consent at any time. If your data are required to perform contractual duties or in order to take steps prior to entering into a contract, we will process your data on the legal basis of Art. 6(1) lit. b GDPR. We also process your data where required to fulfil our statutory obligations on the legal basis of Art. 6(1) lit. c GDPR. Data processing may additionally take place on the basis of our legitimate interests as per Art. 6(1) lit. f GDPR. The applicable legal bases for processing in each individual scenario are explained below in this privacy policy.

Data protection officer

We have appointed a data protection officer.

machCon Deutschland GmbH
Christian Herbst
Robert-Bosch-Strasse 1
D-78234 Engen

Phone: +49 7733 360 35 40
Email address: christian.herbst@machcon.com

Recipients of personal data

We work in partnership with a number of external parties as part of our business operations. As a result, in certain circumstances, we may also need to transfer personal data to these external parties. We will only pass on personal data to external parties when required to fulfil contractual duties, in the case of legal requirements (e.g. disclosure of data to the tax authorities), to uphold our legitimate interest in transferring the data as per Art. 6(1) lit. f GDPR or where any other legal grounds permit the transfer of data. If we use processors, we will only pass on personal data from customers on the basis of a valid data processing agreement. In cases where we jointly process data, a contract will be concluded to govern the joint processing.

Withdrawing your consent to data processing

A wide range of data processing operations are only possible with your express consent. You reserve the right to withdraw previously granted consent at any time. The legality of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases; right to object to direct advertising (Art. 21 GDPR)

IN CASES WHERE DATA ARE PROCESSED ON THE BASIS OF ART. 6 (1) lit. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA IN QUESTION, UNLESS WE CAN PRESENT COMPELLING AND LEGITIMATE REASONS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION IN ACCORDANCE WITH ART. 21 (1) GDPR.

IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING, INCLUDING PROFILING, INSOFAR AS IT IS RELATED TO THE DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 (2) GDPR.

Right to appeal to the competent supervisory authority

In the event of violations of the GDPR, data subjects are entitled to a right to appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place where the alleged violation occurred. The right to appeal exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to demand that we hand over any data that we process automatically on the basis of your consent or to fulfil a contract to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only take place where technically feasible.

Right to access, rectification and erasure

Within the scope of the applicable statutory provisions, you reserve the right to obtain information free of charge at any time about your stored personal data, their origin and recipients and the purpose of the data processing and, if applicable, the right to rectify or erase this data. If you have any questions regarding this or any other questions on the subject of personal data, please contact us.

Right to restrict data processing

You have the right to request that the processing of your personal data is restricted. Please contact us at any time to exercise this right. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us – we usually require time to verify this. For the duration of this review, you also have the right to request that the processing of your personal data is restricted.
If the processing of your personal data was/is carried out unlawfully, you may request the restriction of data processing instead of deletion.
If we no longer require your personal data, but you need the data to exercise, defend or assert legal claims, you have the right to request that we restrict the processing of your personal data instead of deleting the data.
If you have lodged an objection under Section 21(1) GDPR, our rights will be weighed up against yours. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data is restricted.

If you have restricted the processing of your personal data, this information – apart from its storage – may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims, or protecting the rights of another natural person or legal entity, or for reasons of an important public interest of the European Union or a Member State.

SSL and/or TLS encryption

In order to ensure adequate security and to provide protection for data transfers such as requests sent to us as the website operator, our website uses SSL/TLS encryption. You can check whether your connection is encrypted by checking whether the address line in your browser has changed from ‘http://’ to ‘https://’ and whether there is a lock symbol in your browser line.

If SSL/TLS encryption has been activated, third parties will not be able to read any data that you disclose to us.

Data collection on this website

Contact form

If you send us queries via the contact form, the details you submit in the query form, including the contact details disclosed there, will be stored by us for the purpose of processing the query and in the event of follow-up questions. We will not disclose this data to third parties without your consent.

This data processing takes place on the legal basis of Art. 6(1) lit. b GDPR, provided your query is related to the fulfilment of a contract or this processing is required to perform pre-contractual measures. In all other scenarios, processing takes place on the basis of our legitimate interest in effectively handling enquiries sent to us (Art. 6(1) lit. f GDPR ) or on the basis of your consent ( Art. 6(1) lit. a GDPR), provided it has been requested. You can withdraw your consent at any time.

We will store the data entered in the contact form until you request their erasure, withdraw your consent for storage or the purpose for which the data was stored no longer applies (e.g. once your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Queries by email, phone or telefax

If you contact us by email, phone or telefax, your query, including all disclosed personal information (name, query) shall be saved and processed by us for the purpose of processing your request. We will not disclose this data to third parties without your consent.

We will store the data sent to us within the scope of contact enquiries until you request their erasure, withdraw your consent for storage or the purpose for which the data was stored no longer applies (e.g. once your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

In-house services

Applicant data management

We give you the opportunity to apply for a job at our company by email, post or using the online application form, for example. Learn more about the extent and purpose of the processing and use of your personal data collected during the application process. We warrant that the collection, processing and use of your data takes place in compliance with the pertinent data protection legislation and all other statutory provisions and that your data are treated as strictly confidential.

Scope and purpose of data collection

When you send us an application, we process the related personal data (e.g. contact and communication information, application documents, notes taken during interviews, etc.) to the extent required to make a decision on whether to hire you. This processing takes place on the legal basis of Section 26 of the Federal Data Protection Act (initiating an employment relationship), Art. 6(1) lit. b GDPR (entering into a contract) and, if you have provided your consent, Art. 6(1) lit. a GDPR. You can withdraw previously granted consent at any time. Your personal data will only be forwarded to employees at our company involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing system in order to conduct the employment relationship as per Section 26 of the Federal Data Protection Act and Art. 6(1) lit. b GDPR.

Data retention periods

If your application is unsuccessful, you reject a job offer or withdraw your application, we reserve the right to store the data you have disclosed up to six months after the application period ends (rejection or application withdrawn) on the basis of our legitimate interests (Art. 6(1) lit. f GDPR). After this period, your data will be erased and physical application documents destroyed. We primarily store this data as evidence in the event of legal action. If it becomes apparent that data will be required beyond the end of the six-month retention period (due to an impending or pending legal dispute, for example), the data will only be deleted once the purpose for its ongoing storage no longer applies.

However, longer storage may occur if you have granted your express consent (Art. 6(1) lit. a GDPR) or where erasure is not yet permitted in line with statutory retention periods.

Inclusion in the applicant pool

If we don’t make you a job offer, you can still opt to be included in our applicant pool. If you decide to join the applicant pool, all documents and information provided in the application process will be saved so we can contact you if we have a suitable vacancy.

Inclusion in the applicant pool only takes place on the basis of your express consent (Art. 6(1) lit. a GDPR). Consent is granted on a voluntary basis and is not related to the ongoing application process. The data subject reserves the right to withdraw their consent at any time. In this scenario, their data will automatically be deleted from the applicant pool in the absence of any statutory retention requirements to the contrary.

Data from the applicant pool is irrevocably deleted within two years of you granting your consent.